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1, INTRODUCTION 

Information technology is changing tremendously, and the security system is needed to protect data 
[1]. Generally, it is not easy to suggest a cryptographic algorithm for all kinds of target devices [2]. There are 
three factors cost, security and performance. The designer must be aware how to use these factors [2]. There 
are many proposed lightweight algorithms like TWINE [9], PRINT [4], KLEIN [7], PRESENT [5], 
LBLOCK [8], mCrypton [6], PRINCE [3] and LED [10]. 

This research paper, will enhance the cost element of DLBCA algorithm by reducing the number of 
S-box without major change on other elements. Also, two attacks differential and boomerang have been 
applied on the suggested algorithm. 


2. DLBCA LIGHTWIGH ALGORITHM 

DLBCA is 32-bit plaintext and key size 80-bit. The structure of DLBCA algorithm looks like the 
structure of feistel with some modifications [11]. There are 32 rounds and in each round, there are operations 
like: Substitution box, Bit permutation, XOR, Rotation and key update. Moreover, there is XOR between the 
cipher text and key in the last round. The DLBCA have four layers as following: 
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¢ First Layer: in this layer, the 32-bit plaintext is XOR with the 32-bit key. The plaintext divides into two 
parts. Each part is 16-bit and the results after XOR of left part will be as inputs to the second layer 
(Substitution box). 

¢ Second Layer: this layer is the most important layer. It produces the confusion property and it gives the 
nonlinearity to the algorithm. It has four 4-bit S-boxes. The output of this layer will be as inputs to the 
third layer (bit permutation). Also, this layer uses one S-box and repeats it 8 times. The characteristics of 
the S-box are the same with good S-box. The values of S-box as shown in Table (1). 


Table 1 S-Box Values 
xX 2 3 4 5 6 FJ 8 9 A B C 
E 8 6 


0 1 D E F 
SX) F C 2 7 9 0 5 A I B D3 4 


¢ Third Layer: This layer produces the diffusion which is also important part for any strong encryption 
algorithm. This method of bit permutation applies on left side which is 16-bit. 
¢ Fourth Layer: this layer applies the rotation and XOR operations on both sides. First of all, rotate the left 
16-bit and then XOR with right 16-bit. The result will keep in left 16-bit. The next step is to rotate the 
right 16-bit and XOR with new left 16-bit and the result will keep in right 16-bit. 
The last important part in any encryption algorithm is key schedule. The MASTER key size as 
mentioned before is 80-bit KO, K1, K2, K3, K4,,....K79.The key update or key schedule is operate as in [17]. 


3. PROPOSED LIGHTWEIGHT ALGORITHM 

This paper enhances the cost factor of DLBCA by reducing the S-box numbers. The suggested 
algorithm utilizes four S-box instead of eight S-box. However, it has xoring 32bit of plaintext with first 32bit 
of key. The round number of suggested algorithm is similar as DLBCA. The suggested algorithm layers are 
shown in Figure (2). 


4. THE DISCUSSION OF COST 
The cost element is one of essential factors that the designer must be consider it when he designs 
any algorithm. This paper calculated the cost of suggested algorithm according to [12]. The cost calculating 
details as follows: 
a. The saving value of lbits is 6 GE while cost value of one S-box is 22 GE. 
b. The cost of 16-bit XOR is 43.5GE. 
c. For additional cost, there is SOGE. 
The costs of the algorithms are presented in table (2). 


Table 2: Cost Comparison between Proposed Algorithm and Others Algorithms 


Algorithm Plaintext Key  S-box Cost 
Lblock [9] 64 80 8 1320 GE 
TWINE [10] 64 80 8 1503GE 
PRESENT [6] 64 80 16 1570 GE 
KLIEN [8] 64 80 16 2097 GE 
DLBCA [ 19] 32 80 8 1116 GE 
Proposed algorithm 32 80 4 1028 GE 


The cost of the suggested algorithm is the lowest comparing with the other algorithms as shown in 
table (2) 
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Figure 1. DLBCA Algorithm Layers in Details [17] 
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Figure 2. Suggested Algorithm Layers in Details 
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5. THE DISCUSSION OF SECURITY 
The cryptanalysis is essential tool that it can scale the security of whatever algorithm. Differential 


and boomerang attacks are applied in this paper. 
5.1. Differential Cryptanalysis 


The minimum active S-box is the most powerful way to measure the resistance of block cipher 
algorithm against differential algorithm [13]-[15]. The results of this attack are presented in table (3). 


Table 3. Active S-box Numbers for Suggested Algorithm and Other Algorithms 


No. Algorithm Min number of active S-box 
4 8 12 16 

1.  TWINE [10] 3 11 24 - 
2. Lblock [9] 3 11 24 35 
3. | PRESENT [6] 8 16 24 32 
4. KLEIN [8] 15 30 45 60 
5. DLBCA [17] 13 31 A8 65 
6. Proposed algorithm 8 16 24 32 


The Table (3) shows that the number of active S-boxes of LBLOCK, PRESENT and TWINE is 
closer to suggested algorithm while the number of active S-box of DLBCA and KLEIN are better than our 
suggested algorithm. On the other hand, the cost of both of them are higher compared with this suggested 
algorithm. 


5.2. Boomerang Cryptanalysis 
Knowing the active S-box numbers in each step is the first step to amount this attack while the 
second step is calculating the distinguisher probability for this attack. The Equation 1s: 


pa (2) ex") 

Which p‘%2.q‘2is the distinguisher probability and NAS is the active S-box. When the probability of 
distinguisher is less than 27 P!U"*ext size We can say the attack can’t go forward [16]. 

Regarding to the proposed algorithm and depending on equation (1), this attack can reach round 3 
with maximal probability 2%. The following points will explain that: 
a. In round 2 there are 4 active S-boxes and in round | there is two active S-box. 
b. To find the probability, we need to apply the equation (1). 
e The final probability is(((2~*) *) 7) x (((277) 7) 2) = 274° x 278 = 2774. 
c. This attack can reach 3 rounds only with probability2“(-24). 

The proposed algorithm has 32 rounds meaning that it 1s resistant to the boomerang attack. The 
results of this attack are presented in table (4). 


Table 4: Boomerang Attack Results for Suggested Algorithm and Other Algorithms 


No. Algorithm Maximum 
Round 
l LBLOCK [9] 11 
2 TWINE [5] 11 
3 PRESENT [6] 7 
4 KLEIN [8] 4 
5 DLBCA [17] 3 
6 Proposed 3 


The Table (4) shows that boomerang cryptanalysis can reach to round 11 with TWINE and 
LBLOCK algorithms but it can reach to round 7 and round 4 with PRESENT and KLEIN respectively. 

While the boomerang cryptanalysis can reach round 3 with DLBCA and suggested algorithm. This 
is mean that the suggested algorithm still has the same number of rounds which is equal with DLBCA after 
reducing the cost factor. Also, the suggested algorithm is better than other algorithms regarding of 
boomerang cryptanalysis. 
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6. CONCLUSION 

This paper has improved the cost factor of DLBCA by reducing the number of S-box. Also, the 
comparisons for cost and security between suggested algorithm and others are shown. To sum up results, the 
cost of suggested algorithm is the lowest cost. Regarding to security side, the suggested algorithm has similar 
number of active S-box when compared with algorithms (TWINE, LBLOCK and PRESENT). According to 
the boomerang attack, the suggested algorithm has the same number of rounds with DLBCA algorithm and it 
is the best from other algorithms. 
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